CVE-2024-53696
Published Mar 7, 2025A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who have gained administr…
Vendor archive
qnap CVEs
Beta · best-effort635 CVEs tagged to vendor qnap — 80 Critical, 167 High, 264 Medium, 124 Low, 0 Unrated.
CVE-2024-53695
Published Mar 7, 2025A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash proces…
CVE-2024-53693
Published Mar 7, 2025An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability c…
CVE-2024-53692
Published Mar 7, 2025A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained…
CVE-2024-50405
Published Mar 7, 2025An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability c…
CVE-2024-50394
Published Mar 7, 2025An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow remote attackers to compromise the security of t…
CVE-2024-50390
Published Mar 7, 2025A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already f…
CVE-2024-48864
Published Mar 7, 2025A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers to rea…
CVE-2024-38638
Published Mar 7, 2025An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gain…
CVE-2024-13086
Published Mar 7, 2025An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of…
CVE-2023-23357
Published Dec 19, 2024A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who hav…
CVE-2023-23356
Published Dec 19, 2024A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained…
CVE-2023-23354
Published Dec 19, 2024A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who hav…
CVE-2022-27600
Published Dec 19, 2024An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers…
CVE-2022-27595
Published Dec 19, 2024An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have gained user access t…
CVE-2024-53691
Published Dec 6, 2024A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained use…
CVE-2024-50404
Published Dec 6, 2024A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the…
CVE-2024-50403
Published Dec 6, 2024A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-50402
Published Dec 6, 2024A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote a…
CVE-2024-50393
Published Dec 6, 2024A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to execute arbit…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-50389
Published Dec 6, 2024A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious code. We have already fixed t…
CVE-2024-50388
Published Dec 6, 2024An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We h…
- evidence mentions
- 4
- Buzz score
- 22.6
CVE-2024-50387
Published Dec 6, 2024A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to inject malicious…
- evidence mentions
- 3
- Buzz score
- 23.9
CVE-2024-48868
Published Dec 6, 2024An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability c…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-48867
Published Dec 6, 2024An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability c…
Showing 251-275 of 635 CVEsPage 11 of 26